Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/et6xz9ETW_-ewv_NSLg3RBAozPg.roa
File: et6xz9ETW_-ewv_NSLg3RBAozPg.roa (raw, json)
Hash identifier: n1YCy5lES1zrx4mf6FJjxBWSGz8RDCERLdf8lnWplIU=
Subject key identifier: 7A:DE:B1:CF:D1:13:5B:FF:9E:C2:FF:CD:48:B8:37:44:10:28:CC:F8
Certificate issuer: /CN=6e83f698800d6ae719970adfaa4fb882fa5156df
Certificate serial: 08291A20
Authority key identifier: 6E:83:F6:98:80:0D:6A:E7:19:97:0A:DF:AA:4F:B8:82:FA:51:56:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boP2mIANaucZlwrfqk-4gvpRVt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/et6xz9ETW_-ewv_NSLg3RBAozPg.roa
Signing time: Sun 20 Mar 2022 10:58:55 +0000
ROA not before: Sun 20 Mar 2022 10:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.175.0/24 maxlen: 24
2a0e:ef40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136911392 (0x8291a20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83f698800d6ae719970adfaa4fb882fa5156df
Validity
Not Before: Mar 20 10:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7adeb1cfd1135bff9ec2ffcd48b837441028ccf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:0a:e0:d2:c6:19:a3:89:33:3a:8a:80:f8:
de:32:6a:7c:71:a3:d4:b4:61:12:5c:60:57:f0:7f:
1d:c1:57:1d:ac:ac:f4:1f:45:d8:09:a9:bb:1a:9b:
bb:1b:30:4e:eb:0b:3b:7d:89:c5:ce:46:36:92:6d:
6b:bc:20:e1:8b:59:73:53:0b:aa:bf:ad:e7:c3:a2:
d3:55:23:6d:09:34:f0:8f:84:a8:8d:a7:f8:17:9c:
95:7a:a2:d6:5c:02:ab:f0:89:ad:a4:9b:78:07:74:
94:f8:3f:c5:02:0c:bf:4a:f2:d7:e3:b0:9a:fa:8c:
bf:cd:45:c5:d2:fe:88:fa:e0:43:86:33:36:47:d0:
d8:59:ed:c5:b4:90:e0:46:2c:2f:0d:24:02:13:41:
e7:7b:b0:d5:ef:67:00:cd:e0:d0:d2:3c:54:bc:73:
77:88:4a:c0:70:66:76:0c:44:65:11:da:08:b7:66:
b4:be:4c:07:fa:7c:22:8f:0f:0c:c4:ad:e0:a9:ff:
00:1b:3d:7f:41:b2:7a:a2:86:ab:cb:cd:1b:1f:5d:
f8:31:70:04:b9:cb:1e:62:8c:2f:f1:f6:ba:38:43:
70:8c:b5:60:5a:9d:96:44:72:5d:01:9a:ca:13:35:
eb:71:6d:28:94:4e:c0:3d:30:9d:7a:75:36:ec:2a:
ee:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DE:B1:CF:D1:13:5B:FF:9E:C2:FF:CD:48:B8:37:44:10:28:CC:F8
X509v3 Authority Key Identifier:
keyid:6E:83:F6:98:80:0D:6A:E7:19:97:0A:DF:AA:4F:B8:82:FA:51:56:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2mIANaucZlwrfqk-4gvpRVt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/et6xz9ETW_-ewv_NSLg3RBAozPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59d1ba-d3af-446d-ad8b-6f762dfc0d0b/1/boP2mIANaucZlwrfqk-4gvpRVt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.175.0/24
IPv6:
2a0e:ef40::/29
Signature Algorithm: sha256WithRSAEncryption
8a:8c:63:6c:8f:9e:40:84:6a:ce:e5:6f:c1:37:7e:f4:59:8b:
73:3f:ce:a1:0b:74:84:be:e4:74:b2:05:4f:1b:c5:d7:95:a9:
cf:ad:31:f9:a5:2e:81:77:8d:7e:d9:d1:c9:e6:ba:32:7e:90:
9c:87:b3:0b:ba:ad:6a:2a:19:e4:1c:6e:4e:66:46:72:24:e0:
cc:74:e5:95:96:89:99:53:00:6b:bb:a2:34:56:28:54:b4:16:
bb:e5:90:89:49:6a:4d:07:ba:26:30:18:8e:57:a3:36:d7:cf:
d7:dc:93:07:ea:f6:88:ba:16:50:79:4a:eb:bd:0f:27:28:4d:
82:1a:03:8c:f3:e2:6a:17:64:bc:77:94:05:a4:3f:40:8e:35:
14:f9:9f:11:18:83:22:61:d8:9b:78:02:bc:90:b7:6c:fd:fc:
49:06:e1:7d:2b:53:52:11:ee:12:71:d5:dc:55:9e:29:13:8d:
25:c8:d1:31:92:e3:f1:23:f8:c5:80:86:e5:f4:6b:90:53:d9:
38:f2:27:10:49:30:7e:fe:f7:cd:7d:b8:ce:3d:f4:e8:a7:a6:
27:7a:d0:10:22:48:f1:a6:02:20:53:e9:28:29:f4:91:e2:3e:
d2:d4:03:26:a0:b6:c6:4a:59:5f:bc:d8:96:de:f2:61:57:62:
27:11:2d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:57 2025 by rpki-client